Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/dea46a-b58a-4609-9df8-0e037f3d5805/1/quIG-D-sXBuqzBd3wQWVoG__DWE.roa
File: quIG-D-sXBuqzBd3wQWVoG__DWE.roa (raw, json)
Hash identifier: qcyyAmKSyfQGeUibpLnU17MsI67/q/auvcsVXQUgwPk=
Subject key identifier: AA:E2:06:F8:3F:AC:5C:1B:AA:CC:17:77:C1:05:95:A0:6F:FF:0D:61
Certificate issuer: /CN=28af17c00757b9860ff6a56ffe2f47e69094e2f6
Certificate serial: 01845DB6615ED151FB26CFD63817B47D427A
Authority key identifier: 28:AF:17:C0:07:57:B9:86:0F:F6:A5:6F:FE:2F:47:E6:90:94:E2:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KK8XwAdXuYYP9qVv_i9H5pCU4vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/dea46a-b58a-4609-9df8-0e037f3d5805/1/quIG-D-sXBuqzBd3wQWVoG__DWE.roa
Signing time: Wed 09 Nov 2022 18:45:44 +0000
ROA not before: Wed 09 Nov 2022 18:45:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208972
IP address blocks: 146.19.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5d:b6:61:5e:d1:51:fb:26:cf:d6:38:17:b4:7d:42:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28af17c00757b9860ff6a56ffe2f47e69094e2f6
Validity
Not Before: Nov 9 18:45:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aae206f83fac5c1baacc1777c10595a06fff0d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b7:03:79:f8:3a:2f:0a:e6:62:af:ef:f7:21:
ae:bc:57:25:41:c7:81:d5:83:a5:fa:3a:9c:93:ab:
01:a2:6b:8a:0a:69:19:cd:66:3d:d0:15:79:5d:28:
f0:49:fd:32:9a:48:3f:4a:28:7e:ab:d6:5c:6f:b7:
ad:85:ac:98:aa:67:3d:fb:1c:83:57:98:24:5f:b6:
03:64:e5:a8:42:af:5a:4c:f2:80:45:e1:de:a7:50:
14:66:d8:be:ee:02:a1:84:5b:2c:b5:1b:9e:b9:1d:
50:df:94:99:5b:71:14:23:6c:2a:94:0b:f5:24:47:
33:d3:d6:34:c1:55:5f:c2:93:28:8e:81:cf:13:ef:
cb:d8:94:3e:a2:e7:db:ef:83:58:b1:eb:16:70:fd:
35:55:e0:10:2f:4e:74:89:a3:1d:0e:e7:a9:3c:67:
bd:7a:0a:7e:5c:d9:84:41:a7:83:9f:72:61:b6:b8:
85:6d:41:05:9a:ce:19:07:40:cd:26:15:ca:6d:69:
0d:35:7b:e3:ca:f4:2e:c0:1d:fd:07:d6:4b:ad:cf:
6a:48:dc:dc:a5:63:df:8e:4a:e6:ac:5f:4e:f1:61:
f9:d7:ee:4c:9c:43:a5:f1:f9:d5:9d:49:07:77:1c:
44:f2:f7:f2:48:11:af:82:0e:06:49:e0:4e:e0:21:
25:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E2:06:F8:3F:AC:5C:1B:AA:CC:17:77:C1:05:95:A0:6F:FF:0D:61
X509v3 Authority Key Identifier:
keyid:28:AF:17:C0:07:57:B9:86:0F:F6:A5:6F:FE:2F:47:E6:90:94:E2:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KK8XwAdXuYYP9qVv_i9H5pCU4vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dea46a-b58a-4609-9df8-0e037f3d5805/1/quIG-D-sXBuqzBd3wQWVoG__DWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dea46a-b58a-4609-9df8-0e037f3d5805/1/KK8XwAdXuYYP9qVv_i9H5pCU4vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.12.0/24
Signature Algorithm: sha256WithRSAEncryption
85:e0:d4:2d:e9:2e:3e:e9:84:14:74:08:b1:2a:3f:21:a7:b4:
b5:57:bc:d6:5a:63:bd:0e:a3:83:2b:d4:30:f8:c7:b7:6d:cb:
88:87:96:44:d9:5e:9c:cf:f4:40:6f:8e:1b:62:65:02:72:e9:
0a:2e:63:21:4f:cf:36:60:7f:61:aa:b1:92:d5:51:03:05:cf:
42:3e:36:76:5b:cd:95:95:ea:5d:e9:c3:de:45:fa:e2:89:90:
04:41:f5:90:91:4a:78:20:49:64:22:c8:37:1d:cd:5b:9e:97:
04:a4:1c:75:2b:50:85:54:cd:7d:d2:e5:f3:af:f3:33:44:59:
ff:2e:1d:1c:39:93:1e:88:26:13:9e:e5:5c:aa:67:b0:7b:71:
1a:ab:c6:9c:a8:10:b8:de:31:3c:26:dd:58:be:46:0b:a6:7d:
41:2c:80:6e:3e:5d:10:24:1f:22:2b:be:fe:69:84:3c:6f:3d:
4a:d4:a9:70:d9:eb:b8:b4:09:47:1c:29:c1:72:b1:09:66:7d:
1a:03:d4:de:07:af:a3:c6:4d:4b:dc:85:6b:b7:a2:30:7b:7f:
c0:94:e4:6c:64:1a:d6:a1:52:c4:d9:8e:56:33:50:1d:09:bd:
a9:99:af:0b:b6:67:e0:17:58:3e:59:3c:14:49:b4:07:52:9a:
c5:48:55:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:07:49 2025 by rpki-client